Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Payload.exe
-
Size
27KB
-
Sample
230713-ryqqlshb39
-
MD5
8ab054d88fcdce1bc76e2ae57464a09b
-
SHA1
9995afbba5a6b346fcfd66eee2f335130a1311c0
-
SHA256
7e0116704c18518cb8f6a60fb00aa9440e61c079701bf816b52c155c748eda48
-
SHA512
5944fb371c6d70b97c9325a057e1b741f00db8dfbf43f3366c1cdf13c7f9fd8acda67f77e329394444f8fe4d6a45eae55bb77084d869eba8c33940cd3cf591ce
-
SSDEEP
384:qLLQKJ3buZjmgERA40DwoyumGPiJRjMFAQk93vmhm7UMKmIEecKdbXTzm9bVhcag:0MK5buQE40fLFA/vMHTi9bD
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Payload.exe
Resource
win10v2004-20230703-en
Malware Config
Extracted
njrat
v2.0
Victim
147.185.221.181:51752
Windows
-
reg_key
Windows
-
splitter
|-F-|
Targets
-
-
Target
Payload.exe
-
Size
27KB
-
MD5
8ab054d88fcdce1bc76e2ae57464a09b
-
SHA1
9995afbba5a6b346fcfd66eee2f335130a1311c0
-
SHA256
7e0116704c18518cb8f6a60fb00aa9440e61c079701bf816b52c155c748eda48
-
SHA512
5944fb371c6d70b97c9325a057e1b741f00db8dfbf43f3366c1cdf13c7f9fd8acda67f77e329394444f8fe4d6a45eae55bb77084d869eba8c33940cd3cf591ce
-
SSDEEP
384:qLLQKJ3buZjmgERA40DwoyumGPiJRjMFAQk93vmhm7UMKmIEecKdbXTzm9bVhcag:0MK5buQE40fLFA/vMHTi9bD
Score10/10-
Drops startup file
-
Adds Run key to start application
-